AnArchitectureofSecurityEngineering.docVIP

An architecture for security engineering Ram Dantu University of Dallas at Texas 2601 North Floyd Road Richardson, Texas, 75080. Email: ram.dantu@utdallas.edu Tele: 972 883 4653 Fax: 972 883 2710  An architecture for security engineering Ram Dantu University of Dallas at Texas 2601 North Floyd Road Richardson, Texas 75080. Email: ram.dantu@utdallas.edu Abstract It is almost impossible to manually detect the security breaches for complex and dynamic environments and react in a timely fashion. On the other hand, automatic response to security alerts is not recommended because differences between intrusions and normal traffic cannot be resolved by predetermined rules. But by proper specification of the expected behavior and measurements (or signatures), error can be computed. This error signal can be used to update the security mechanisms for achieving the required output. Towards this objective, a novel architecture based on feedback control system is specified. We call this defender-control-loop. In this architecture, the micro and macroscopic view of security are integrated to achieve an end-to-end security. Second, we use the same methodology for modeling intrusions, suspicious probes, scans and responses. We call it intruder-control-loop. For a secured network, intruder-c